GPMC Error.

[Mark.]

I've installed GPMC SP1 on my XP Pro workstation (SP2
RC2).

The workstation is in a NT4 domain but I'm logging into a
W2K AD domain.

When I run GPMC, select the 'Default Domain Policy',
click on the 'Settings' tab and then try and show the
<Windows Settings><Security Settings> section I get the
error shown below. I have had no problems with the GPO's
before and they still look fine on the DC themselves.
The same thing in the Default DC Policy is fine.

Any ideas?

Thanks

Mark.

==========================================================
An error has occurred while collecting data for Security
Configuration Engine (SCE) Extension.

This error impacts the following settings:
Account Policies (Password Policy, Account Lockout
Policy, Kerberos Policy)
Local Policies (Audit Policy, User Rights Assignment,
Security Options)
Event Log
Restricted Groups
System Services
Registry
File System
The following errors apply to all of the above settings:
The
file "\\hlghthgad1.thg.hydegrp.net\sysvol\thg.hydegrp.net\
Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}
\Machine\microsoft\windows nt\secedit\gpttmpl.inf" is not
in a valid format. Details: Index was out of range. Must
be non-negative and less than the size of the collection.
Parameter name: index
==========================================================

 

[Chriss3 [MVP]]

How the clients OS should not matter for editing the policy, how ever RSOP
won't work under NT4.0
--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup

 

[Mark]

Thanks for the info Christoffer.

Just in case the NT4 domain I was in was affecting the
display of the security settings I left it and move the
workstation into an AD domain. I still get the same
error.

It's not such a great problem in itself but makes me
wonder if there is something wrong with my AD. If it's a
fault of GPMC then I'll live with that. If it's my AD I
have to sort it out.

Cheers

 

[Chriss3 [MVP]]

Many problem are related to DNS, make sure the TCP/IP DNS Settings are
correct and pointing to the server with the dns zone for AD. This is mostly
the first deployed domain controller.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup

 

[Mark]

Hi Christoffer,

DNS is fine. I can view most of the GPO's and part of
the default domain policy just fine.

I've tried the following to see if it makes a difference;

* Removed XP SP2 RC2 - Same error.
* Restored the AD on a 2003 test network and run GPMC
from XP workstation. - Same error.
* Run GPMC directly on a 2003 DC - same error.

Regards

Mark.

 

[Freddie]

This problem is a known problem with the GPMC. If you
have a restricted group with a blank 'member of' property
this error will occur. The GPMC just doesn't parse the
info correctly.

I beleive the use of Fazam can also cause this.

Fixed in later releases? Let's hope so.